Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87b214-ba8d-4df9-9ec9-1a16ef492034/1/HpPX4oqwueeUSHlGoProzW7VQHE.mft
File:                     HpPX4oqwueeUSHlGoProzW7VQHE.mft (raw, json)
Hash identifier:          GdkvRML3YjLxyposw7NnV+5Ql3szHR/45KJ7UBP5CFg=
Subject key identifier:   12:67:F8:68:25:EF:9D:B2:F3:AC:B1:00:7B:11:8B:60:F7:92:66:E9
Authority key identifier: 1E:93:D7:E2:8A:B0:B9:E7:94:48:79:46:A0:FA:E8:CD:6E:D5:40:71
Certificate issuer:       /CN=1e93d7e28ab0b9e794487946a0fae8cd6ed54071
Certificate serial:       019F8342C64EC850DFF3B4FC5C6F657D2143
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpPX4oqwueeUSHlGoProzW7VQHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/87b214-ba8d-4df9-9ec9-1a16ef492034/1/HpPX4oqwueeUSHlGoProzW7VQHE.mft
Manifest number:          0359
Signing time:             Tue 21 Jul 2026 06:00:19 +0000
Manifest this update:     Tue 21 Jul 2026 06:00:19 +0000
Manifest next update:     Wed 22 Jul 2026 06:00:19 +0000
Files and hashes:         1: HpPX4oqwueeUSHlGoProzW7VQHE.crl (hash: nGfQm3jYQv5iQiVifGsk4Z2wT6euDuPPMfmJEUBMR6o=)
                          2: ZvpkHDHin9hopFucWLYTL8yzbzs.roa (hash: kDSqC5wVuK3UIDaQObaNelkz/juujqc2r2FmfE7Rrx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/87b214-ba8d-4df9-9ec9-1a16ef492034/1/HpPX4oqwueeUSHlGoProzW7VQHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/87b214-ba8d-4df9-9ec9-1a16ef492034/1/HpPX4oqwueeUSHlGoProzW7VQHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpPX4oqwueeUSHlGoProzW7VQHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:83:42:c6:4e:c8:50:df:f3:b4:fc:5c:6f:65:7d:21:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e93d7e28ab0b9e794487946a0fae8cd6ed54071
        Validity
            Not Before: Jul 21 06:00:19 2026 GMT
            Not After : Jul 22 06:00:19 2026 GMT
        Subject: CN=1267f86825ef9db2f3acb1007b118b60f79266e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fa:94:ba:e9:2b:3c:2d:dd:dc:6d:31:07:f3:
                    be:3f:f5:4f:1f:17:52:c3:fd:9a:ac:0f:f5:91:4c:
                    06:ae:ef:c0:fb:34:76:1a:e2:0a:0f:2e:89:5b:68:
                    05:39:a0:a4:d6:85:18:ef:dd:d7:35:c6:a8:b1:c9:
                    ab:9e:ef:f9:06:63:52:47:0c:1a:ae:0a:c4:6d:a9:
                    d5:5e:b0:28:df:c0:f0:a3:d1:ad:82:dd:43:2a:a4:
                    70:bc:c4:62:39:71:c7:13:28:a8:86:9c:35:3e:51:
                    43:2e:ea:02:02:df:f7:51:6b:ae:7c:a0:95:1a:1c:
                    97:ee:5d:62:1c:fb:90:28:e8:7d:e6:9d:3a:fc:4f:
                    a8:d1:22:bc:dc:15:12:09:10:0e:f4:9d:4b:e3:7a:
                    89:fa:b5:1d:3b:d9:e9:e7:30:50:d9:7d:57:0c:f5:
                    6b:37:dd:34:76:de:7f:3b:1d:de:22:89:7f:0c:1c:
                    5a:9f:9c:f2:65:98:05:a3:fa:33:48:43:20:f1:69:
                    60:94:8a:81:a4:bc:02:68:d2:c2:73:7e:c6:97:7c:
                    b4:01:1b:e4:c7:ff:d6:a5:bd:ea:37:d2:01:6c:95:
                    21:79:cb:43:47:8e:6c:27:fa:40:d7:2c:e3:f9:37:
                    b1:55:b6:fd:1c:f2:94:75:ad:47:29:fc:99:f2:03:
                    4a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:67:F8:68:25:EF:9D:B2:F3:AC:B1:00:7B:11:8B:60:F7:92:66:E9
            X509v3 Authority Key Identifier:
                keyid:1E:93:D7:E2:8A:B0:B9:E7:94:48:79:46:A0:FA:E8:CD:6E:D5:40:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpPX4oqwueeUSHlGoProzW7VQHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87b214-ba8d-4df9-9ec9-1a16ef492034/1/HpPX4oqwueeUSHlGoProzW7VQHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87b214-ba8d-4df9-9ec9-1a16ef492034/1/HpPX4oqwueeUSHlGoProzW7VQHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:48:37:a2:2d:4d:33:9d:e4:d8:ac:bd:91:9e:e3:80:bb:04:
         ab:97:eb:4d:7f:bb:21:00:c6:57:c0:b6:f6:b8:80:92:2b:b4:
         53:38:f1:8f:15:e1:e3:17:e3:50:63:2e:88:c9:13:04:55:4e:
         89:8c:0c:0a:f5:cd:57:b4:ad:43:30:7e:16:d8:60:1c:2b:05:
         bb:a2:1b:46:f5:c7:09:d0:72:66:b7:16:4e:eb:59:7a:c8:5b:
         59:a1:ce:7f:80:e0:2c:d6:94:28:f0:18:04:b9:31:ab:82:5e:
         8d:44:ed:75:da:d7:ff:a9:5e:71:03:0b:1a:21:c2:4a:56:c2:
         51:0e:42:72:a8:71:07:70:c6:d5:87:35:1d:d9:5c:40:3a:41:
         90:78:2d:f4:83:16:6e:5a:0c:cc:ad:29:55:34:81:6e:4f:84:
         12:a7:90:eb:17:84:b9:0e:85:f9:9e:04:56:b9:25:4e:bb:35:
         e8:6c:15:4c:05:09:26:df:2b:4c:e2:17:d2:d7:c1:58:11:1f:
         5c:3d:23:e4:f8:20:b7:f4:13:f3:ff:2e:58:3c:44:bd:a6:0a:
         cb:ea:99:85:bf:bc:7f:70:37:bb:e1:a5:4f:7b:19:af:27:8c:
         24:e4:ca:2a:8a:fe:a9:27:30:d4:4d:67:0d:3e:02:8b:0c:41:
         64:06:ef:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:33:05 2026 by rpki-client